Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/f_Pxr2i7dEZre8eWWu_dz2VFo30.roa
File: f_Pxr2i7dEZre8eWWu_dz2VFo30.roa (raw, json)
Hash identifier: DdM5usJn9Sh+IAyEHQdCbygFsWkvn36oXDjzuJybIEU=
Subject key identifier: 7F:F3:F1:AF:68:BB:74:46:6B:7B:C7:96:5A:EF:DD:CF:65:45:A3:7D
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019FD1FF17985A771B02D42009BE88CA71BE
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/f_Pxr2i7dEZre8eWWu_dz2VFo30.roa
Signing time: Wed 05 Aug 2026 12:56:23 +0000
ROA not before: Wed 05 Aug 2026 12:56:23 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 13335
IP address blocks: 5.83.149.0/24 maxlen: 24
89.106.90.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 17:22:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d1:ff:17:98:5a:77:1b:02:d4:20:09:be:88:ca:71:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Aug 5 12:56:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7ff3f1af68bb74466b7bc7965aefddcf6545a37d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:30:94:7d:46:47:cb:93:c7:91:bd:d5:6a:d1:
12:69:84:7a:fa:4a:b3:2b:7d:98:ad:47:7d:68:3e:
3e:86:da:5c:de:89:8a:50:e0:a8:76:64:ea:33:d3:
b1:2b:7e:b5:f9:18:ae:01:f6:77:a8:98:c5:b6:f5:
80:3b:a2:d5:54:95:cd:dd:f6:ca:ab:15:a2:91:16:
48:fb:54:7d:a3:40:29:13:ee:87:34:3c:da:fa:5f:
c3:53:1b:24:02:7a:a6:e9:4a:12:83:06:8f:d6:a9:
ba:de:6a:ac:69:cd:30:b8:6b:fa:82:c2:d1:2a:7f:
42:6d:71:27:ee:59:41:dc:3f:21:5f:54:09:ee:9b:
d6:64:d2:be:82:38:2c:c3:d8:ac:1c:73:0a:4f:18:
1f:1b:99:4e:c5:88:57:23:85:14:22:bf:3f:a8:06:
77:75:1e:d8:2e:04:65:ec:7b:74:91:8c:95:80:bc:
e1:c5:2f:3e:66:c1:9e:79:c6:87:4e:f0:c6:81:22:
ff:b5:3c:87:3b:c1:d1:59:95:b7:51:48:f0:0d:8e:
65:f2:aa:3d:43:0f:cc:3a:eb:f0:e3:ae:0d:7c:95:
19:fd:61:d4:e8:f2:b6:bd:55:4c:a2:9e:7d:fe:c5:
47:89:49:e1:c0:49:80:26:9c:3c:50:9f:2c:8a:45:
78:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:F3:F1:AF:68:BB:74:46:6B:7B:C7:96:5A:EF:DD:CF:65:45:A3:7D
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/f_Pxr2i7dEZre8eWWu_dz2VFo30.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.149.0/24
89.106.90.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:be:c1:5d:66:a2:f6:11:9c:07:9d:da:5f:1e:cc:ae:d6:b1:
9c:2a:2a:37:a6:6e:39:8d:35:e6:e7:2c:d4:e4:07:e4:f2:5a:
7a:cc:fd:ae:32:fe:57:01:7f:21:80:87:13:fe:67:62:f2:2e:
67:c6:11:45:43:49:2a:9a:0f:bf:54:a6:35:d5:6f:f7:d1:ca:
5f:50:91:83:af:bd:64:6f:ac:0c:8b:26:24:dc:0a:80:e5:3a:
f9:ce:cc:92:dd:a8:5e:1a:77:5b:67:eb:ce:7a:0a:76:14:0e:
10:b2:87:13:a9:3a:7a:31:bb:ce:9b:43:b8:57:7c:3d:19:b5:
26:6a:69:30:38:88:df:d9:e9:f5:17:3b:20:c8:83:45:1a:35:
ff:ce:ec:8d:f0:f3:10:d8:3f:26:4e:38:b5:b7:83:9b:3f:65:
17:9e:97:bf:ea:ff:6e:b4:77:9b:65:24:be:bf:34:03:9e:aa:
ad:83:97:d9:88:f1:52:8d:e4:a8:47:29:29:aa:ec:d7:ab:53:
d5:b4:89:a2:57:72:3b:d7:98:ae:69:49:73:84:4a:8f:4c:74:
99:1c:a2:4e:69:58:c0:9f:85:0f:52:62:fe:03:8a:d6:3e:b3:
96:68:8a:45:51:e4:87:d7:0d:f9:f6:8f:4c:4d:1a:96:04:65:
92:e4:1f:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 01:42:43 2026 by rpki-client